Welcome to GeekPolice!

We truly love technology and security and we want to share it with the world. Recognize the excitement of technology here daily:☞Security Discussion on malware, ransomware, and much more!
☞24/7 hard- and software tech support (+mobile!)
☞Virus and malware removal support
☞Business & Enterprise Users/Endpoints Now Supported!!
☞Tons of tutorials, guides and solutions
☞The very finest of our voluntary Support Staff
☞Much, much more FREE!

I got the fake virus detection pop up last Wednesday and I immediately ran rkill and shut down. I later ran Malwarebytes and it found 3 items in the rootkit. Today I ran Mcafee scan and it deleted "mdrtigra.dll" and now when I start up it shows that file missing. When I try to update Malwarebytes, I get the blue screen shut down. Here is the OTL log (continued in next post):

1. If you are using Firefox, make sure that your download settings are as follows:

* Tools->Options->Main tab * Set to "Always ask me where to Save the files".

2. During the download, rename Combofix to Combo-Fix as follows:

3. It is important you rename Combofix during the download, but not after.4. Please do not rename Combofix to other names, but only to the one indicated.5. Close any open browsers.6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

We need to disable your local AV (Anti-virus) before running Combofix.

See HERE for how to disable your AV.

Double click on ComboFix.exe.

Follow the prompts. NOTE:

ComboFix will check to see if the Microsoft Windows Recovery Console is installed.***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.

The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.

Allow ComboFix to download the Recovery Console.

Accept the End-User License Agreement.

The Recovery Console will be installed.

You will then get this next prompt that asks if you want to continue the malware scan, select yes

Allow combofix to run

Post C:\combofix.txt back here.

Note:Do not mouseclick combofix's window whilst it's running. That may cause it to stall.